Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gMb0xctwlXxS5KuLQX50bCkveyM.cer
File:                     gMb0xctwlXxS5KuLQX50bCkveyM.cer (raw, json)
Hash identifier:          DZUMF1634Tmni/IVF7EdCMkBrBjDFiLYh/Q6sKKuA9E=
Subject key identifier:   80:C6:F4:C5:CB:70:95:7C:52:E4:AB:8B:41:7E:74:6C:29:2F:7B:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD7468286E1F359B453076FF5560E1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/gMb0xctwlXxS5KuLQX50bCkveyM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:33:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203236

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 17:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:74:68:28:6e:1f:35:9b:45:30:76:ff:55:60:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:33:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80c6f4c5cb70957c52e4ab8b417e746c292f7b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:88:bb:5e:67:ba:7c:0b:44:1d:54:1f:ee:
                    9d:5d:f1:ce:03:84:38:cc:9a:46:1b:67:bc:3c:df:
                    4f:6b:d7:fc:28:39:89:46:f0:d8:37:52:cd:3e:24:
                    a6:80:e6:ce:18:69:5b:bc:b9:6d:c9:08:1c:a6:40:
                    60:19:e0:ac:b0:92:ec:00:22:c6:ca:aa:34:d0:91:
                    f1:75:2b:6a:55:f2:c5:fd:26:fe:48:d9:0d:93:4b:
                    07:4c:88:27:a3:2c:01:90:b1:d8:34:11:7d:f4:4e:
                    61:88:9a:b1:79:a1:5f:59:81:41:f9:78:f1:48:34:
                    09:ab:2e:69:16:30:aa:80:4a:ba:7b:ae:60:14:20:
                    ad:4c:b2:29:91:a2:bf:dc:f9:33:7a:62:0b:79:69:
                    24:87:34:d7:89:40:0f:8e:d1:a5:f4:5d:d7:2c:eb:
                    5e:1e:2a:85:ed:fa:bf:96:48:c1:ab:da:88:20:16:
                    13:0f:b5:c9:74:56:d9:80:17:8a:13:e3:39:86:b1:
                    d5:b2:de:ed:b6:d0:91:9e:d5:77:99:55:16:02:42:
                    af:21:07:79:be:37:5c:60:35:a9:30:d5:f4:2a:e9:
                    35:09:b8:79:5d:c6:10:5a:eb:80:c8:22:af:39:ff:
                    64:c7:96:cb:f3:16:a0:1b:16:68:63:a3:8c:f1:60:
                    d9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C6:F4:C5:CB:70:95:7C:52:E4:AB:8B:41:7E:74:6C:29:2F:7B:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/gMb0xctwlXxS5KuLQX50bCkveyM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203236

    Signature Algorithm: sha256WithRSAEncryption
         34:16:9a:50:48:68:92:0c:fd:46:65:b3:62:bb:4e:8a:0f:be:
         10:94:3b:8b:03:99:f2:7f:95:d4:e1:c7:c9:bd:ca:d4:46:25:
         95:35:90:e3:db:bc:18:39:4d:f2:1d:8d:e6:d4:e9:d3:df:43:
         89:88:59:49:74:35:c9:89:c4:ef:33:1b:90:7b:26:28:2e:93:
         87:32:55:3b:5f:21:c7:01:e5:5b:c2:4f:aa:ec:f6:28:9e:ad:
         be:9f:be:ef:1d:bd:bc:7e:85:af:db:ec:3c:2a:5f:00:5b:ab:
         d3:fa:45:ab:22:1e:4f:c8:b8:73:9c:b6:ee:bc:68:56:1e:58:
         a9:bd:ad:0d:eb:45:f8:0b:35:fc:1b:b8:6b:47:9a:17:6a:69:
         e9:02:c2:12:e6:1c:df:d2:87:b7:82:85:ea:89:33:3e:38:36:
         71:c9:14:6f:35:e7:32:71:c9:fb:1e:10:41:47:de:dc:9b:e1:
         d8:2e:41:4a:c2:bc:be:4c:36:d6:7d:9a:8e:fb:d7:b7:4c:61:
         b9:19:5e:67:f6:5f:1c:96:83:f3:4e:eb:03:3b:f9:b4:ef:4e:
         91:11:cc:0e:d6:92:f1:06:8b:08:17:3a:6e:d2:f8:43:37:b3:
         53:07:3f:44:4e:14:31:aa:9b:bf:7d:94:d0:1b:38:b0:7e:5e:
         65:36:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----